# Top **URL:** https://discuss.elastic.co/top.md?page=1671&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1672 --- ## [Elastic Search with Hadoop](https://discuss.elastic.co/t/elastic-search-with-hadoop/116590)
**Author:** [@george\_assan](https://discuss.elastic.co/u/george_assan)\ **Replies:** 3\ **Last updated:** [January 29, 2018, 5:52am UTC](https://discuss.elastic.co/t/elastic-search-with-hadoop/116590 "2018-01-29T05:52:40Z")
Hello, I am quite new to both elastic search and hadoop. I was hoping to receive assistance on the way forward after setting up elastic search and hadoop on my local machine.? A bit of a novice here so be kind...lol. I c… --- ## [Sending unique filename pattern to unique Index?](https://discuss.elastic.co/t/sending-unique-filename-pattern-to-unique-index/85683)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 3\ **Last updated:** [May 29, 2017, 6:30am UTC](https://discuss.elastic.co/t/sending-unique-filename-pattern-to-unique-index/85683 "2017-05-29T06:30:09Z")
Hi, How can I send different log files to different indexs? For example: I read with the "filebeat" a file called: abc.full.log and a file called xyz.cdr and send both to LogStash. How can I make that abc.full.log w… --- ## [Creating alias too slow](https://discuss.elastic.co/t/creating-alias-too-slow/81464)
**Author:** [@Felipe\_Santos](https://discuss.elastic.co/u/Felipe_Santos)\ **Replies:** 3\ **Last updated:** [April 6, 2017, 1:12pm UTC](https://discuss.elastic.co/t/creating-alias-too-slow/81464 "2017-04-06T13:12:32Z")
I have a job which run every day, this job creates indexes and alias. But now the creation is too slow. If I have a lot of alias it could increase the cluster state? What is a big cluster state? The search and index a… --- ## [Kibana with Shield won't work](https://discuss.elastic.co/t/kibana-with-shield-wont-work/62507)
**Author:** [@lekshmi](https://discuss.elastic.co/u/lekshmi)\ **Replies:** 3\ **Last updated:** [October 10, 2016, 3:43pm UTC](https://discuss.elastic.co/t/kibana-with-shield-wont-work/62507 "2016-10-10T15:43:17Z")
Hi, In our app , we were trying to use kibana with shield. We are trying to embed the dashboard in an iframe. Following is what we are doing to pass the authorization header: On click of dashboard name in UI ,we mak… --- ## [What is compatible version to upgrade from 1.3.4 without any existing api changes](https://discuss.elastic.co/t/what-is-compatible-version-to-upgrade-from-1-3-4-without-any-existing-api-changes/45478)
**Author:** [@dany](https://discuss.elastic.co/u/dany)\ **Replies:** 3\ **Last updated:** [March 30, 2016, 2:58pm UTC](https://discuss.elastic.co/t/what-is-compatible-version-to-upgrade-from-1-3-4-without-any-existing-api-changes/45478 "2016-03-30T14:58:21Z")
I understand there might not be a direct answer for this. Some suggestion would be very helpful. I would like to upgrade from my current elasticsearch version 1.3.4 to some version above 1.7 or 1.7 itself. I would like… --- ## [Field data issue](https://discuss.elastic.co/t/field-data-issue/38164)
**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\ **Replies:** 3\ **Last updated:** [December 31, 2015, 3:46am UTC](https://discuss.elastic.co/t/field-data-issue/38164 "2015-12-31T03:46:47Z")
let's say I give field data a fix value of memory in config, what will happen if it is not enough to load whole necessary data? will it throw exception to client or will it load necessary data arbitary? --- ## [Irregular behaviour between "Count", "Sum" and "Unique Count" aggregations](https://discuss.elastic.co/t/irregular-behaviour-between-count-sum-and-unique-count-aggregations/23816)
**Author:** [@sqpdln](https://discuss.elastic.co/u/sqpdln)\ **Replies:** 3\ **Last updated:** [June 18, 2015, 6:09am UTC](https://discuss.elastic.co/t/irregular-behaviour-between-count-sum-and-unique-count-aggregations/23816 "2015-06-18T06:09:34Z")
I have a bar chart where I plot the Count of documents, with a fixed interval of one minute. I have noticed that when the interval is scaled due to too many buckets, it keeps the x-axis label "timestamp per minute", and … --- ## [Moving from Solr to Elastic](https://discuss.elastic.co/t/moving-from-solr-to-elastic/211)
**Author:** [@moshere](https://discuss.elastic.co/u/moshere)\ **Replies:** 3\ **Last updated:** [May 5, 2015, 3:07pm UTC](https://discuss.elastic.co/t/moving-from-solr-to-elastic/211 "2015-05-05T15:07:08Z")
Hi, I'm moving from Solr to Elastic and learning a lot about this great product. I've couple of questions regarding search and I would like to get your guidance. In Solr I user to have phonetic and soundex search on it… --- ## [Having issues with low watermark / disk space](https://discuss.elastic.co/t/having-issues-with-low-watermark-disk-space/374934)
**Author:** [@cybertron](https://discuss.elastic.co/u/cybertron)\ **Replies:** 5\ **Last updated:** [February 24, 2025, 9:45am UTC](https://discuss.elastic.co/t/having-issues-with-low-watermark-disk-space/374934 "2025-02-24T09:45:24Z")
Hi I have been struggling with low watermark that keeps getting hit on some nodes in my cluster. I have a 6 node cluster, that unfortunatly have different diskspace. 3 nodes have 5 TB and 3 nodes have 10TB. The proble… --- ## [Clarification on Output Supported by Elastic Agents - Is Output to Logstash Supported?](https://discuss.elastic.co/t/clarification-on-output-supported-by-elastic-agents-is-output-to-logstash-supported/286777)
**Author:** [@Log\_Gobbler](https://discuss.elastic.co/u/Log_Gobbler)\ **Replies:** 5\ **Last updated:** [October 18, 2021, 1:08pm UTC](https://discuss.elastic.co/t/clarification-on-output-supported-by-elastic-agents-is-output-to-logstash-supported/286777 "2021-10-18T13:08:07Z")
I apologize ahead of time for posting this in the Beats sub, but it appears there isn't a sub for Elastic Agent. Near the top of this page, it states that "Beats and Elastic Agent can both send data directly to Elastics… --- ## [Anomaly notifications are not received](https://discuss.elastic.co/t/anomaly-notifications-are-not-received/265042)
**Author:** [@insanity13](https://discuss.elastic.co/u/insanity13)\ **Replies:** 5\ **Last updated:** [February 26, 2021, 4:27am UTC](https://discuss.elastic.co/t/anomaly-notifications-are-not-received/265042 "2021-02-26T04:27:24Z")
Elastic Cloud 7.11 Created "Anomaly Alert" for Web Application (to Send Slack notification). No notification has been sent --- ## [How to change "ignore\_above" property of field in index pattern even index match pattern will be insert in the future?](https://discuss.elastic.co/t/how-to-change-ignore-above-property-of-field-in-index-pattern-even-index-match-pattern-will-be-insert-in-the-future/251208)
**Author:** [@le\_ba\_nam](https://discuss.elastic.co/u/le_ba_nam)\ **Replies:** 5\ **Last updated:** [October 8, 2020, 4:53am UTC](https://discuss.elastic.co/t/how-to-change-ignore-above-property-of-field-in-index-pattern-even-index-match-pattern-will-be-insert-in-the-future/251208 "2020-10-08T04:53:30Z")
I want to change "ignore\_above" property of field in index pattern. I have success with post request like: PUT myIndex-\*/doc/\_mapping { "properties": { "message": { "type": "text", "… --- ## [\[Java Agent\] - apm-server replies with http400 - Problem validating JSON document](https://discuss.elastic.co/t/java-agent-apm-server-replies-with-http400-problem-validating-json-document/129439)
**Author:** [@MarcoAbi](https://discuss.elastic.co/u/MarcoAbi)\ **Replies:** 5\ **Last updated:** [April 27, 2018, 6:37am UTC](https://discuss.elastic.co/t/java-agent-apm-server-replies-with-http400-problem-validating-json-document/129439 "2018-04-27T06:37:53Z")
Hello, I'm trying to send a custom transaction to apm through the Java Agent. However I'm experiencing problems and for every transaction I close, the server replies http400 with this error on console: ERROR \[request\]… --- ## [Help in using logstash](https://discuss.elastic.co/t/help-in-using-logstash/115190)
**Author:** [@kanthimathi](https://discuss.elastic.co/u/kanthimathi)\ **Replies:** 5\ **Last updated:** [January 15, 2018, 10:30pm UTC](https://discuss.elastic.co/t/help-in-using-logstash/115190 "2018-01-15T22:30:14Z")
Hi all, Currently, i am using filebeat and metricbeat to get logs from kubernetes into the elastic cloud. I wish to test this using logstash now. Can somebody guide me how to pull the data? I am aware of setting up the … --- ## [Wouldn't this be cool?](https://discuss.elastic.co/t/wouldnt-this-be-cool/32307)
**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\ **Replies:** 5\ **Last updated:** [October 15, 2015, 8:53pm UTC](https://discuss.elastic.co/t/wouldnt-this-be-cool/32307 "2015-10-15T20:53:53Z")
Enticing subject I hope. \[:smile:\] Here's my thought. I've got servers with 256GB RAM. The optimal heap size for an ES JVM is 32GB (or just under that). How cool would it be if there was something like a "data-shar… --- ## [Transforming/filtering json logs](https://discuss.elastic.co/t/transforming-filtering-json-logs/220523)
**Author:** [@swisscheese](https://discuss.elastic.co/u/swisscheese)\ **Replies:** 0\ **Last updated:** [February 23, 2020, 2:34am UTC](https://discuss.elastic.co/t/transforming-filtering-json-logs/220523 "2020-02-23T02:34:18Z")
I have some WAF logs (from AWS) that are already in json format. I want to modify them with logstash in a few specific ways, and it’s not clear to me from the docs what the best way to do this is. Hoping someone can poin… --- ## [Query String with Fuzzy search using ~ operator](https://discuss.elastic.co/t/query-string-with-fuzzy-search-using-operator/247844)
**Author:** [@learning21](https://discuss.elastic.co/u/learning21)\ **Replies:** 0\ **Last updated:** [September 8, 2020, 8:20am UTC](https://discuss.elastic.co/t/query-string-with-fuzzy-search-using-operator/247844 "2020-09-08T08:20:08Z")
Hi, I am referring to this and am able to perform a fuzzy search with query\_string in kibana. In kibana "salry~" is being searched and it returns results with "salary" due to ~ operator for fuzziness. GET help/\_se… --- ## [Syslog Output Plugin](https://discuss.elastic.co/t/syslog-output-plugin/205039)
**Author:** [@jforsain](https://discuss.elastic.co/u/jforsain)\ **Replies:** 0\ **Last updated:** [October 24, 2019, 9:58am UTC](https://discuss.elastic.co/t/syslog-output-plugin/205039 "2019-10-24T09:58:01Z")
Hello, I'm using the syslog output plugin in my Logatsh file conf, but during the execution ( /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/apache.conf ) of the logstash conf file, it shows multiple errors : … --- ## [Ubuntu 16.04 & Elasticsearch 1.7 - Startup Error](https://discuss.elastic.co/t/ubuntu-16-04-elasticsearch-1-7-startup-error/89752)
**Author:** [@yashvit](https://discuss.elastic.co/u/yashvit)\ **Replies:** 0\ **Last updated:** [June 16, 2017, 5:04pm UTC](https://discuss.elastic.co/t/ubuntu-16-04-elasticsearch-1-7-startup-error/89752 "2017-06-16T17:04:12Z")
I have recently added a new node(fresh install of ubuntu & elastic install via dpkg) to my existing cluster, and randomly one server would not start elasticsearch on a restart. When manually trying to start it gives the … --- ## [Day of Week aggregation with TimeZone](https://discuss.elastic.co/t/day-of-week-aggregation-with-timezone/81924)
**Author:** [@Paulo\_Henrique\_PH](https://discuss.elastic.co/u/Paulo_Henrique_PH)\ **Replies:** 0\ **Last updated:** [April 11, 2017, 7:12am UTC](https://discuss.elastic.co/t/day-of-week-aggregation-with-timezone/81924 "2017-04-11T07:12:08Z")
I use ES 5.1.2 and I'm trying to compute day of week and time of day from a date field and consider timezone at the same time. my first script is def d = doc\['my\_field'\].date; d.addHours(10); d.getDayOfWeek(); The er… --- ## [Using filebeat, cannot read json log to custom index](https://discuss.elastic.co/t/using-filebeat-cannot-read-json-log-to-custom-index/270914)
**Author:** [@thuynh](https://discuss.elastic.co/u/thuynh)\ **Replies:** 2\ **Last updated:** [April 26, 2021, 9:47pm UTC](https://discuss.elastic.co/t/using-filebeat-cannot-read-json-log-to-custom-index/270914 "2021-04-26T21:47:34Z")
Index template already created. It runs but doesn''t tell me any error and can't see new index which should be call "fb-message-7.12.0-yyyy.mm.dd" I notice other issues i'm missing the param to indicate this is a custo… --- ## [Filter/Collapse on multiple fields](https://discuss.elastic.co/t/filter-collapse-on-multiple-fields/252858)
**Author:** [@Turbo-555](https://discuss.elastic.co/u/Turbo-555)\ **Replies:** 2\ **Last updated:** [October 26, 2020, 9:22am UTC](https://discuss.elastic.co/t/filter-collapse-on-multiple-fields/252858 "2020-10-26T09:22:01Z")
Hi all, I'm trying to find documents that have distinct values over 2 separate fields. Documents have \_id, filters.10,filters.20 For Example: 1, f10\_1, f20\_1 2, f10\_1, f20\_1 3, f10\_2, f20\_1 4, f10\_3, … --- ## [Reindexing via Dev Tools Console returns "Failed to connect to Console's backend."](https://discuss.elastic.co/t/reindexing-via-dev-tools-console-returns-failed-to-connect-to-consoles-backend/174311)
**Author:** [@johncam](https://discuss.elastic.co/u/johncam)\ **Replies:** 2\ **Last updated:** [March 28, 2019, 3:14pm UTC](https://discuss.elastic.co/t/reindexing-via-dev-tools-console-returns-failed-to-connect-to-consoles-backend/174311 "2019-03-28T15:14:43Z")
I am in the process of consolidating some older daily indexes into monthly indexes, and this is working without issue for indexes that are less than 100MB in size. However, now that I am working on rolling up larger ind… --- ## [How data for 'Overall' field in 'Anomaly Explorer' window is calcualted](https://discuss.elastic.co/t/how-data-for-overall-field-in-anomaly-explorer-window-is-calcualted/106292)
**Author:** [@anomalyml](https://discuss.elastic.co/u/anomalyml)\ **Replies:** 2\ **Last updated:** [November 7, 2017, 4:06am UTC](https://discuss.elastic.co/t/how-data-for-overall-field-in-anomaly-explorer-window-is-calcualted/106292 "2017-11-07T04:06:38Z")
Hi, I have created a 'multi metric job' analysis for a given data. After completing the analysis, I check my results from 'Anomaly Explorer' window. From the documents I understand, the anomaly is calculated independen… --- ## [What is the most efficient way to implement visualizations in dashboard](https://discuss.elastic.co/t/what-is-the-most-efficient-way-to-implement-visualizations-in-dashboard/52194)
**Author:** [@Mick\_Mahoney](https://discuss.elastic.co/u/Mick_Mahoney)\ **Replies:** 2\ **Last updated:** [June 9, 2016, 9:41am UTC](https://discuss.elastic.co/t/what-is-the-most-efficient-way-to-implement-visualizations-in-dashboard/52194 "2016-06-09T09:41:19Z")
I can have 1 visualization split on category showing 3 graphs for CPU for example (3 different categories of server) Or I can have 3 separate visualizations (1 per category) which looks neater as the legend is on each … --- ## [Kibana 4.1 proxy problem](https://discuss.elastic.co/t/kibana-4-1-proxy-problem/24416)
**Author:** [@alexdtx](https://discuss.elastic.co/u/alexdtx)\ **Replies:** 2\ **Last updated:** [June 29, 2015, 2:47pm UTC](https://discuss.elastic.co/t/kibana-4-1-proxy-problem/24416 "2015-06-29T14:47:21Z")
Hi everybody, I have got a proxy in my house with a password and an username. When I'm trying to connect me on the localhost:5601. My screen display the famous error "Kibana: Unknown error while connecting to Elastic… --- ## [Getting SearchPhaseExecutionException from elastic search 1.4](https://discuss.elastic.co/t/getting-searchphaseexecutionexception-from-elastic-search-1-4/22545)
**Author:** [@Vijayakumari\_B\_N](https://discuss.elastic.co/u/Vijayakumari_B_N)\ **Replies:** 2\ **Last updated:** [March 9, 2015, 6:58am UTC](https://discuss.elastic.co/t/getting-searchphaseexecutionexception-from-elastic-search-1-4/22545 "2015-03-09T06:58:53Z")
Hi, I am trying to search some text using elastic search server, with some indexing. I am using default shards and i did not modify anything in my elasticsearch.yml. My application was working fine. I did another … --- ## [Term negation and fuzziness](https://discuss.elastic.co/t/term-negation-and-fuzziness/341645)
**Author:** [@cvarano](https://discuss.elastic.co/u/cvarano)\ **Replies:** 1\ **Last updated:** [August 28, 2023, 9:47pm UTC](https://discuss.elastic.co/t/term-negation-and-fuzziness/341645 "2023-08-28T21:47:49Z")
The use case is a search engine over text documents for the general public. We were previously using a simple match query, but recently switched to simple\_query\_string in order to easily support phrase matching. I'm fi… --- ## [Metricbeat runtime error: slice bounds out of range](https://discuss.elastic.co/t/metricbeat-runtime-error-slice-bounds-out-of-range/297113)
**Author:** [@tperrot](https://discuss.elastic.co/u/tperrot)\ **Replies:** 1\ **Last updated:** [February 16, 2022, 2:45pm UTC](https://discuss.elastic.co/t/metricbeat-runtime-error-slice-bounds-out-of-range/297113 "2022-02-16T14:45:45Z")
Hello, I’m currently integrating metricbeat 7.10 on a Linux distribution using Golang 1.14. But a “runtime error: slice bounds out of range” is raised, only on ARMv7 targets, see below. In addition, I integrated fileb… --- ## [If i try to Add search search.max\_buckets then getting below error CURL -XGET "http://localhost:9200/\_cluster/settings {"persistent":{},"transient":{"search.max\_buckets": 200000}} curl: (3) \[globbing\] nested brace in column 53](https://discuss.elastic.co/t/if-i-try-to-add-search-search-max-buckets-then-getting-below-error-curl-xget-http-localhost-9200-cluster-settings-persistent-transient-search-max-buckets-200000-curl-3-globbing-nested-brace-in-column-53/250004)
**Author:** [@Suparna\_Shankar](https://discuss.elastic.co/u/Suparna_Shankar)\ **Replies:** 1\ **Last updated:** [September 28, 2020, 3:38am UTC](https://discuss.elastic.co/t/if-i-try-to-add-search-search-max-buckets-then-getting-below-error-curl-xget-http-localhost-9200-cluster-settings-persistent-transient-search-max-buckets-200000-curl-3-globbing-nested-brace-in-column-53/250004 "2020-09-28T03:38:06Z")
if i try to Add search search.max\_buckets then getting below error CURL -XGET "http://localhost:9200/\_cluster/settings {"persistent":{},"transient":{"search.max\_buckets": 200000}} curl: (3) \[globbing\] nested brace in col… --- ## [Calculate Average of each category in Array](https://discuss.elastic.co/t/calculate-average-of-each-category-in-array/202503)
**Author:** [@WatsonS](https://discuss.elastic.co/u/WatsonS)\ **Replies:** 1\ **Last updated:** [October 10, 2019, 2:49pm UTC](https://discuss.elastic.co/t/calculate-average-of-each-category-in-array/202503 "2019-10-10T14:49:51Z")
Hello Everyone, I'm building an accommodation rating system where one rating input contain 5 categories with the example structure collected in an array: "submitted\_rating" : \[ { "rating": 4, "title": "Travel" }, {… --- ## [ECE broken after one node lost](https://discuss.elastic.co/t/ece-broken-after-one-node-lost/167481)
**Author:** [@osykora](https://discuss.elastic.co/u/osykora)\ **Replies:** 1\ **Last updated:** [February 7, 2019, 5:37pm UTC](https://discuss.elastic.co/t/ece-broken-after-one-node-lost/167481 "2019-02-07T17:37:31Z")
Hi, I'm currently working on HA tests for ECE before going to production and I just ran into an interesting issue. I have 4 nodes divided into 2 zones and ECE elasticsearch cluster (the system one) have 2 nodes (one no… --- ## [The settings of java.policy](https://discuss.elastic.co/t/the-settings-of-java-policy/163296)
**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\ **Replies:** 1\ **Last updated:** [January 11, 2019, 9:13am UTC](https://discuss.elastic.co/t/the-settings-of-java-policy/163296 "2019-01-11T09:13:02Z")
在java.policy中增加： grant codeBase "file: /user.home/elasticsearch-6.5.1/-", { permission java.security.AllPermission; }; The bootstrap check failed. While when I add something like the following: grant codeBase "f… --- ## ["java.lang.OutOfMemoryError: Java heap space" after running for a few minutes](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-after-running-for-a-few-minutes/121165)
**Author:** [@joshuaspence](https://discuss.elastic.co/u/joshuaspence)\ **Replies:** 1\ **Last updated:** [February 23, 2018, 5:10am UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-after-running-for-a-few-minutes/121165 "2018-02-23T05:10:05Z")
We are seeing Logstash dying with an out of memory error after running for anywhere from 5 to 15 minutes. We are using Logstash 6.2.2 with the following configuration: input { beats { include\_codec\_tag =\> false … --- ## [Flatten json array to combine fields (right ruby code?))](https://discuss.elastic.co/t/flatten-json-array-to-combine-fields-right-ruby-code/103235)
**Author:** [@malhotras](https://discuss.elastic.co/u/malhotras)\ **Replies:** 1\ **Last updated:** [October 10, 2017, 1:54pm UTC](https://discuss.elastic.co/t/flatten-json-array-to-combine-fields-right-ruby-code/103235 "2017-10-10T13:54:12Z")
Here is how my input data looks like: { "details": \[ { "place": "abc", "group": 3, "year": 2006, "id": 1304, "street": "xyz 14", "lf\_number": "0118", "code": 4433, … --- ## [InfluxDB Output: parametric data\_points](https://discuss.elastic.co/t/influxdb-output-parametric-data-points/95938)
**Author:** [@JoaquinS](https://discuss.elastic.co/u/JoaquinS)\ **Replies:** 1\ **Last updated:** [August 7, 2017, 5:30am UTC](https://discuss.elastic.co/t/influxdb-output-parametric-data-points/95938 "2017-08-07T05:30:18Z")
Hello, I want to write this data into InfluxDB: { "product" =\> "telegraf", "data\_points" =\> { "TraficoEntrante" =\> 2474864615, "hostname" =\> "host1", "TraficoSaliente" =\> 247486… --- ## [Cross-cluster errors if remote cluster cannot be reached](https://discuss.elastic.co/t/cross-cluster-errors-if-remote-cluster-cannot-be-reached/95355)
**Author:** [@afederici](https://discuss.elastic.co/u/afederici)\ **Replies:** 1\ **Last updated:** [August 4, 2017, 3:17pm UTC](https://discuss.elastic.co/t/cross-cluster-errors-if-remote-cluster-cannot-be-reached/95355 "2017-08-04T15:17:29Z")
Hi, I’m experimenting with the cross-cluster search feature and I have a question about error handling. Imagine I have a multi-cluster setup like this: cluster\_master: my app connects here and this is where I setup t… --- ## [Logstash Core Plugin Firewall Patterns are outdated](https://discuss.elastic.co/t/logstash-core-plugin-firewall-patterns-are-outdated/91326)
**Author:** [@DanMa](https://discuss.elastic.co/u/DanMa)\ **Replies:** 1\ **Last updated:** [June 30, 2017, 9:24am UTC](https://discuss.elastic.co/t/logstash-core-plugin-firewall-patterns-are-outdated/91326 "2017-06-30T09:24:15Z")
Hey, iam trying to built up a Syslog Solution for my ASA Firewall. I use udp as Input.. I use this grok filter (and i get everytime a \_grokparsefailure): %{CISCO\_TAGGED\_SYSLOG}%{GREEDYDATA:cisco\_message} After my… --- ## [Kibana display time in UTC instead of timezone "dateFormat:tz" selected](https://discuss.elastic.co/t/kibana-display-time-in-utc-instead-of-timezone-dateformat-tz-selected/80307)
**Author:** [@stef35340](https://discuss.elastic.co/u/stef35340)\ **Replies:** 1\ **Last updated:** [March 28, 2017, 6:28pm UTC](https://discuss.elastic.co/t/kibana-display-time-in-utc-instead-of-timezone-dateformat-tz-selected/80307 "2017-03-28T18:28:09Z")
Hi everyone, I've an issue with Kibana since our summer time in France. All @timestamp of Kibana are displayed in UTC instead of taking into account the parameter "dateFormat:tz". I have the value "Europe/Paris" for th… --- ## [Oracle listener regexp/grok pattern help](https://discuss.elastic.co/t/oracle-listener-regexp-grok-pattern-help/67886)
**Author:** [@FrankC](https://discuss.elastic.co/u/FrankC)\ **Replies:** 1\ **Last updated:** [December 7, 2016, 6:40am UTC](https://discuss.elastic.co/t/oracle-listener-regexp-grok-pattern-help/67886 "2016-12-07T06:40:54Z")
Hi, I need to get oracle listener logs loaded using LS. I was able to extract the timestamp and replace the LS @timestamp successfully as well as some other info. I am fairly new to regexp/grok, but came across this p… --- ## [Reporting Plugin Issues](https://discuss.elastic.co/t/reporting-plugin-issues/50658)
**Author:** [@Andrew\_Krug](https://discuss.elastic.co/u/Andrew_Krug)\ **Replies:** 1\ **Last updated:** [November 16, 2016, 7:21pm UTC](https://discuss.elastic.co/t/reporting-plugin-issues/50658 "2016-11-16T19:21:38Z")
After installing the xpack plugin into kibana on ubuntu there is still an issue with the reporting plugin were it is unable to to execute the command: tar jxf /opt/kibana/installedPlugins/x-pack/.phantom/phantomjs-1.9.… --- ## [Kibana password encapsulation](https://discuss.elastic.co/t/kibana-password-encapsulation/63344)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 1\ **Last updated:** [October 19, 2016, 8:29pm UTC](https://discuss.elastic.co/t/kibana-password-encapsulation/63344 "2016-10-19T20:29:24Z")
Hi Team, Is there a way we can use environment variables for username/password in logstash.conf and kibana.yml? please let me know how. I tried profile values but it's not working (kibana.yml): 1: elasticsearch.usern… --- ## [Elasticsearch logstash output plugin production configuration](https://discuss.elastic.co/t/elasticsearch-logstash-output-plugin-production-configuration/43969)
**Author:** [@gaurav1424](https://discuss.elastic.co/u/gaurav1424)\ **Replies:** 1\ **Last updated:** [March 10, 2016, 7:04am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-output-plugin-production-configuration/43969 "2016-03-10T07:04:12Z")
Hello All, I have prototype working for me with Devices sending syslogs and then logstash parsing it and putting into elasticsearch. In my logstash config file I have this : elasticsearch { hosts =\> \["hostIP… --- ## [Apache Phoenix with Kibana](https://discuss.elastic.co/t/apache-phoenix-with-kibana/378)
**Author:** [@vishnu667](https://discuss.elastic.co/u/vishnu667)\ **Replies:** 1\ **Last updated:** [May 8, 2015, 7:37am UTC](https://discuss.elastic.co/t/apache-phoenix-with-kibana/378 "2015-05-08T07:37:13Z")
is it possible to integrate Apache Phoenix with Kibana for visualization ? --- ## [Duplicate content when using azure-blob-storage input](https://discuss.elastic.co/t/duplicate-content-when-using-azure-blob-storage-input/344046)
**Author:** [@djesus](https://discuss.elastic.co/u/djesus)\ **Replies:** 4\ **Last updated:** [October 11, 2023, 7:00am UTC](https://discuss.elastic.co/t/duplicate-content-when-using-azure-blob-storage-input/344046 "2023-10-11T07:00:34Z")
Hello everyone, I'm encountering an issue while using the azure-blob-storage input in Filebeat, where I'm consistently getting duplicate entries each time I poll for data. Here's the setup: We have a container in Azure… --- ## [How to match words already indexed?](https://discuss.elastic.co/t/how-to-match-words-already-indexed/173121)
**Author:** [@Wassim\_Ben\_Amor](https://discuss.elastic.co/u/Wassim_Ben_Amor)\ **Replies:** 4\ **Last updated:** [March 20, 2019, 5:54pm UTC](https://discuss.elastic.co/t/how-to-match-words-already-indexed/173121 "2019-03-20T17:54:55Z")
Hello, I have a big list of words. Each word have a meaning. Example : { word : "new york", meaning :"city" } { word : "today", meaning :"date" } I have indexed all these words, each one in a document. Now I have… --- ## [APM Rum agent source maps for multiple subdomains](https://discuss.elastic.co/t/apm-rum-agent-source-maps-for-multiple-subdomains/160426)
**Author:** [@estevez](https://discuss.elastic.co/u/estevez)\ **Replies:** 4\ **Last updated:** [December 14, 2018, 9:42pm UTC](https://discuss.elastic.co/t/apm-rum-agent-source-maps-for-multiple-subdomains/160426 "2018-12-14T21:42:55Z")
When uploading the the source map for the clientside js RUM agent you need to specify: service\_name service\_version bundle\_filepath As part of my applications deploy process I upload a new source map with a consistent… --- ## [MetricBeat shipping incomplete data from raspberry](https://discuss.elastic.co/t/metricbeat-shipping-incomplete-data-from-raspberry/134033)
**Author:** [@amitphulera](https://discuss.elastic.co/u/amitphulera)\ **Replies:** 4\ **Last updated:** [June 26, 2018, 5:21am UTC](https://discuss.elastic.co/t/metricbeat-shipping-incomplete-data-from-raspberry/134033 "2018-06-26T05:21:14Z")
Hi All, I have recently started exploring the elastic products and was able to run ElasticSearch, Kibana, and MetricBeat on my workstation and I was able to view system metrics on Kibana dashboards perfectly. I wanted … --- ## [Template Elasticsearch about data](https://discuss.elastic.co/t/template-elasticsearch-about-data/96103)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 4\ **Last updated:** [August 9, 2017, 1:01pm UTC](https://discuss.elastic.co/t/template-elasticsearch-about-data/96103 "2017-08-09T13:01:49Z")
Hello guys, I want help to define my template elasticsearch 5.5.1 An example of line : 90|336882106|2080159|12F6|1162|025C|03/08/201708:02:46|A1|LEGACY|CATCH|10001|258|request|01|000541|01|3585086414|00|apache2|CATCH\_… --- ## [Help with error - broken test input](https://discuss.elastic.co/t/help-with-error-broken-test-input/95025)
**Author:** [@hukh](https://discuss.elastic.co/u/hukh)\ **Replies:** 4\ **Last updated:** [July 29, 2017, 4:13pm UTC](https://discuss.elastic.co/t/help-with-error-broken-test-input/95025 "2017-07-29T16:13:51Z")
Hello I am working on a project that extract the existed fault in other project, in this case i am working with Elasticsearch. Basically, we got the reversions that flagged as bug and compile the source and the tests th… [Previous page](https://discuss.elastic.co/top.md?page=1670&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1672&per_page=50&period=all)